Only one version published. This is a weak signal. Project has a decent number of stars and forks. Insufficient evidence to classify as malware.
No verification record available.
The package has only one version published, which could indicate that the package is immature, not well maintained or potentially malicious. However, this is only a single piece of evidence with low confidence. The project has a decent number of stars and forks, suggesting it's not entirely untrustworthy. Without stronger evidence, I cannot classify this package as malware.
